Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4PPEdxcfhaGG3Foz3jMtjENPfG9KnQ5J2F5sBJLexX4J/0/3138372e37332e3136302e302f32302d3234203d3e203238363534.roa
File:                     3138372e37332e3136302e302f32302d3234203d3e203238363534.roa (raw, json)
Hash identifier:          zaxXS0GwoRxwwKCH1eAhmqID8MG2eyuC3/hdeLRQH7g=
Subject key identifier:   3F:B9:6E:71:40:4E:F4:48:24:80:F9:B9:FD:E7:6E:AB:3E:8D:95:B8
Certificate issuer:       /CN=930909AA3662DF88849EF968F649C7749F3E8DAF
Certificate serial:       19EAADDAB08E2A6509881348DFB41B0B42C127F9
Authority key identifier: 93:09:09:AA:36:62:DF:88:84:9E:F9:68:F6:49:C7:74:9F:3E:8D:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/930909AA3662DF88849EF968F649C7749F3E8DAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4PPEdxcfhaGG3Foz3jMtjENPfG9KnQ5J2F5sBJLexX4J/0/3138372e37332e3136302e302f32302d3234203d3e203238363534.roa
Signing time:             Wed 23 Jul 2025 15:00:29 +0000
ROA not before:           Wed 23 Jul 2025 14:55:29 +0000
ROA not after:            Wed 22 Jul 2026 15:00:29 +0000
asID:                     28654
IP address blocks:        187.73.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4PPEdxcfhaGG3Foz3jMtjENPfG9KnQ5J2F5sBJLexX4J/0/930909AA3662DF88849EF968F649C7749F3E8DAF.crl
                          rsync://rpki-repo.registro.br/repo/4PPEdxcfhaGG3Foz3jMtjENPfG9KnQ5J2F5sBJLexX4J/0/930909AA3662DF88849EF968F649C7749F3E8DAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/930909AA3662DF88849EF968F649C7749F3E8DAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 13:18:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:ea:ad:da:b0:8e:2a:65:09:88:13:48:df:b4:1b:0b:42:c1:27:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=930909AA3662DF88849EF968F649C7749F3E8DAF
        Validity
            Not Before: Jul 23 14:55:29 2025 GMT
            Not After : Jul 22 15:00:29 2026 GMT
        Subject: CN=3FB96E71404EF4482480F9B9FDE76EAB3E8D95B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e2:92:28:8d:ee:ad:25:87:48:73:aa:e4:e0:
                    bc:ab:6b:2d:cf:04:9f:3c:98:9f:18:b4:b3:08:46:
                    41:02:4b:ee:97:4c:f9:17:21:bc:ff:48:90:b4:7a:
                    d3:03:7e:c4:55:59:72:6a:2b:3c:78:e8:5e:61:83:
                    d9:a5:ef:a2:17:61:5d:ba:35:1a:08:ed:b1:f8:37:
                    3a:48:62:52:c5:9b:a6:89:56:51:91:77:40:3a:0e:
                    89:75:5e:09:57:5f:53:22:6c:1e:42:ac:96:fb:7e:
                    07:86:24:59:69:35:13:89:ae:e3:a3:ae:98:a5:2d:
                    e3:b8:cf:43:7d:97:a5:48:fd:7f:d8:a1:ce:d6:83:
                    ac:7e:51:48:4e:dc:7e:37:82:0b:f1:c9:05:de:09:
                    31:66:86:77:d3:ef:a3:4e:c2:01:52:50:57:23:b8:
                    a7:be:7b:4e:01:76:c5:1d:41:6a:4e:9b:55:77:e1:
                    0e:7b:bb:45:54:36:cd:c5:12:2b:f4:68:82:f7:d8:
                    87:2f:ef:48:9a:67:b4:d9:da:db:9b:0e:40:fc:f5:
                    be:e0:d8:62:38:26:74:b7:6f:93:ee:e2:dd:38:77:
                    86:96:da:1f:68:27:cc:f5:4b:20:2b:26:31:62:cf:
                    81:36:d7:ba:e7:8b:c7:5e:92:eb:c2:e9:77:34:92:
                    64:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:B9:6E:71:40:4E:F4:48:24:80:F9:B9:FD:E7:6E:AB:3E:8D:95:B8
            X509v3 Authority Key Identifier:
                keyid:93:09:09:AA:36:62:DF:88:84:9E:F9:68:F6:49:C7:74:9F:3E:8D:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4PPEdxcfhaGG3Foz3jMtjENPfG9KnQ5J2F5sBJLexX4J/0/930909AA3662DF88849EF968F649C7749F3E8DAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/930909AA3662DF88849EF968F649C7749F3E8DAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4PPEdxcfhaGG3Foz3jMtjENPfG9KnQ5J2F5sBJLexX4J/0/3138372e37332e3136302e302f32302d3234203d3e203238363534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4f:f0:75:2c:d7:4a:e7:10:2c:81:f8:11:e6:32:ad:4b:8f:1d:
         b3:79:2d:2b:1f:8f:e8:f4:17:bd:03:e7:c1:8b:4e:fb:17:da:
         1f:c1:64:42:60:33:f5:1f:53:11:19:b8:2b:a4:08:4d:50:d7:
         9e:d6:a1:bc:25:4c:f2:9b:5f:6d:ca:40:80:96:60:87:46:4f:
         f0:27:50:51:06:f4:50:c2:ee:20:be:c8:08:39:40:55:ac:27:
         87:7f:00:13:fc:44:c7:df:28:ef:0c:5d:72:54:79:77:2b:2b:
         28:bd:6c:f6:8a:bb:b0:12:59:a6:2b:2f:7d:0e:52:95:b4:6e:
         29:ff:f3:91:d8:2b:c6:9b:a3:ff:a7:b4:e9:e0:92:9e:20:9c:
         08:2f:bd:8b:e7:4d:be:0c:66:8c:8e:e8:17:7a:62:10:52:da:
         58:ee:9f:cb:59:77:43:bc:bd:64:de:7f:0a:e6:1c:3a:8c:bc:
         a1:20:5a:52:48:85:25:6c:61:22:91:84:15:9c:96:8c:55:96:
         88:2c:47:c9:78:35:fe:cb:be:44:21:f9:56:e3:18:21:62:2e:
         0a:b4:69:51:0b:bc:36:39:69:14:6b:c4:0d:3e:d4:fd:df:e7:
         76:1f:4f:d1:63:11:19:5c:bd:f4:1a:91:5c:52:a3:02:8c:ca:
         c6:f8:17:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:53:16 2025 by rpki-client